[jtrac-svn] SF.net SVN: j-trac:[1427] trunk/jtrac/pom.xml

[<udi...@us...>]

Revision: 1427
          http://sourceforge.net/p/j-trac/code/1427
Author:   udittmer
Date:     2022-01-12 19:44:50 +0000 (Wed, 12 Jan 2022)
Log Message:
-----------
no need for log4j updates - the API jar isn't vulnerable

Modified Paths:
--------------
    trunk/jtrac/pom.xml

Modified: trunk/jtrac/pom.xml
===================================================================
--- trunk/jtrac/pom.xml	2022-01-12 17:01:00 UTC (rev 1426)
+++ trunk/jtrac/pom.xml	2022-01-12 19:44:50 UTC (rev 1427)
@@ -356,19 +356,7 @@
             <groupId>org.apache.poi</groupId>
             <artifactId>poi</artifactId>
             <version>5.1.0</version>
-            <exclusions>
-                <exclusion>
-					<groupId>org.apache.logging.log4j</groupId>
-					<artifactId>log4j-api</artifactId>
-                </exclusion>
-            </exclusions>
         </dependency>
-		<dependency>
-			<!-- POI needs this, but pulls in 2.14.1, which is insecure -->
-			<groupId>org.apache.logging.log4j</groupId>
-			<artifactId>log4j-api</artifactId>
-			<version>2.16.0</version>
-		</dependency>
         <dependency>
             <groupId>org.tmate</groupId>
             <artifactId>javasvn</artifactId>

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.